This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: Txc8qejuKSwRm58PbT0Piy7pi6+Dlo+NFOC2Li0M/M0=
Subject key identifier: E1:BA:19:0F:68:E1:08:82:4D:5A:09:33:7E:78:3C:88:7F:1E:6A:E7
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019BF53EAB716310EA66E5E64A7B781C986B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0EBA
Signing time: Sun 25 Jan 2026 13:01:23 +0000
Manifest this update: Sun 25 Jan 2026 13:01:23 +0000
Manifest next update: Mon 26 Jan 2026 13:01:23 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: B0bX2HUw5ImUB5TSGRvQXZVzbCgpQrQaneNqCgpxTr4=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:ab:71:63:10:ea:66:e5:e6:4a:7b:78:1c:98:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jan 25 13:01:23 2026 GMT
Not After : Jan 26 13:01:23 2026 GMT
Subject: CN=e1ba190f68e108824d5a09337e783c887f1e6ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:31:01:74:ba:55:81:4e:87:f8:7e:8b:8a:
57:ba:4a:a2:c9:2e:90:a9:ae:ab:93:1f:26:dd:51:
1e:19:56:83:52:93:a8:ec:68:01:ea:3c:14:4a:c4:
06:25:d9:24:52:b9:e7:54:1f:cf:d9:f1:22:78:aa:
aa:3b:54:6d:37:e8:3b:b0:4b:b4:92:4a:61:f4:c5:
c3:f3:d4:33:0b:7d:98:e3:dd:78:0e:1a:22:a1:56:
15:37:8c:8e:73:16:00:8b:e2:cc:bc:ee:df:5b:de:
9f:cf:89:40:3c:e6:88:f2:ba:52:0d:41:e0:6a:a5:
4b:2e:b3:d4:e0:a6:a2:37:1f:dc:b7:d8:e7:4d:7a:
ae:97:43:6f:a8:65:95:ba:c8:85:44:61:48:0b:6b:
82:d0:24:aa:fc:54:9b:f6:93:b2:cb:bb:d1:48:74:
d5:dd:96:a1:ef:94:22:c2:d8:bc:30:01:b6:4c:73:
15:b6:8b:0d:20:e4:e1:f1:c0:ef:e7:36:21:a2:83:
6e:ae:34:32:a0:0b:df:61:fa:f3:6a:dd:e8:4f:05:
0b:8c:72:74:7f:40:a3:58:e6:7e:71:ad:a2:d4:d0:
da:a8:4b:b4:45:71:50:a2:9f:dd:12:e4:38:1f:a4:
28:3c:55:5c:bf:63:a4:c4:6e:db:75:0c:65:db:66:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BA:19:0F:68:E1:08:82:4D:5A:09:33:7E:78:3C:88:7F:1E:6A:E7
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:71:d0:95:dc:e1:d2:12:cf:ce:66:9d:39:8e:c2:47:a8:28:
d9:a7:b9:1c:5e:3a:4c:df:6e:63:b5:39:3f:57:d9:be:f6:a4:
2e:de:3d:cd:79:b1:eb:fb:a0:09:2a:4d:2c:35:e3:64:93:c4:
be:58:ab:f5:db:4f:41:7d:90:e7:4f:be:7a:d5:bc:62:6e:2a:
26:0a:bd:71:e2:cd:6d:05:96:10:5f:88:e2:37:2e:43:33:b8:
76:93:00:53:3c:bf:a1:99:88:ba:17:80:50:6c:d3:31:1f:28:
63:a0:78:3b:85:e3:f1:ef:7a:36:18:6b:aa:df:53:44:ba:9f:
ce:77:99:ec:9b:81:0d:b4:d4:c3:93:3a:b4:9c:88:52:8c:e5:
6a:1f:60:e5:4e:91:8d:76:f1:67:71:3f:f3:b2:d9:a7:b1:d4:
11:5d:d4:00:d8:c7:1a:7e:9c:74:b1:df:b2:fa:a2:73:d5:35:
b1:ce:44:ed:02:3a:aa:6b:5b:b4:ae:68:28:50:f1:72:60:72:
21:8d:a0:1d:62:09:47:e7:b3:91:b8:39:61:af:07:2d:df:aa:
96:da:29:42:56:c0:31:52:5a:11:55:d1:b6:f0:9d:33:f7:f4:
9b:fd:ae:32:67:11:83:22:c1:87:83:af:b3:35:4d:df:d7:94:
3f:68:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:14:50 2026 by rpki-client